@nookplot/mcp 0.4.95 → 0.4.99

package/dist/auth.js

@@ -1,195 +1,71 @@
 /**
  * Credential management for the Nookplot MCP server.
  *
- * Single source of API-key truth lives at `~/.nookplot/credentials.json`
- * (chmod 600) — creator's API key, private key, gateway URL. Shared
- * across all forged agents because the API key authenticates the CREATOR
- * (one per user), not the per-forged-agent identity.
- *
- * Multi-agent scoping lives in per-profile files:
- *   `~/.nookplot/profiles/<name>/profile.json` → { scopedAgentAddress }
- * The MCP client selects a profile via the `NOOKPLOT_PROFILE` env var.
- * That way:
- *   - Hermes users: profile wired by the installer into hermes config.yaml
- *     as `env.NOOKPLOT_PROFILE = "<slug>"`
- *   - Claude Code / Cursor / Windsurf users: manually add
- *     `env.NOOKPLOT_PROFILE = "<slug>"` to their MCP config
- *   - CLI users: `NOOKPLOT_PROFILE=<slug> nookplot <cmd>` or
- *     `nookplot --profile <slug> <cmd>` (set via CLI layer)
+ * Stores credentials in ~/.nookplot/credentials.json (chmod 600).
  *
  * @module auth
  */
-import { readFileSync, writeFileSync, mkdirSync, existsSync, chmodSync, readdirSync, statSync, renameSync, unlinkSync } from "node:fs";
+import { readFileSync, writeFileSync, mkdirSync, existsSync, chmodSync } from "node:fs";
 import { join } from "node:path";
 import { homedir } from "node:os";
+const NOOKPLOT_DIR = join(homedir(), ".nookplot");
+const CREDENTIALS_PATH = join(NOOKPLOT_DIR, "credentials.json");
+/** Per-profile credential dir — used when NOOKPLOT_PROFILE env is set. */
+const AGENTS_DIR = join(NOOKPLOT_DIR, "agents");
 /**
- * Atomic write helper — writes `content` to `${path}.tmp` first, then
- * `rename()`s it over the real path. `rename()` is atomic on POSIX + NTFS,
- * so a concurrent reader can never observe a half-written file. If the
- * process crashes between `writeFileSync` and `renameSync`, the original
- * file (if any) is untouched — user data is never lost to a partial write.
+ * Resolve the credentials file path for the current run.
  *
- * The chmod is applied to the tmp file BEFORE the rename so the final
- * path is protected from the first moment it exists. On Windows chmod is
- * a no-op (wrapped in try/catch at the caller).
+ * Lookup order:
+ *   1. Explicit override via NOOKPLOT_CREDENTIALS_PATH env (escape hatch)
+ *   2. Profile-scoped path when NOOKPLOT_PROFILE is set + the file exists
+ *      (~/.nookplot/agents/<profile>/credentials.json)
+ *   3. Global ~/.nookplot/credentials.json
  *
- * Why this matters: `credentials.json` is the single source of truth for
- * a user's Nookplot identity — API key, private key, wallet address. A
- * truncated write (crash mid-`writeFileSync`) would wipe out the user's
- * account locally, forcing them to re-register from scratch. Same risk
- * applies to `profile.json` (wrapper alias would point nowhere) and
- * `active-profile` (sticky default silently clears). The cost of the
- * tmp+rename pattern is one extra syscall; the cost of losing a user's
- * credentials is catastrophic.
+ * The profile-scoped path is what makes a forged child agent (vh1, vh2, …)
+ * actually authenticate AS itself with the gateway — so tool calls land
+ * under the child's address rather than the parent's. The Forge install
+ * flow writes this file when the user provides a child keystore.
  */
-function writeFileAtomic(path, content, opts = {}) {
-    const tmp = `${path}.tmp`;
-    writeFileSync(tmp, content, { encoding: "utf-8", mode: opts.mode ?? 0o600 });
-    try {
-        if (opts.mode !== undefined)
-            chmodSync(tmp, opts.mode);
-    }
-    catch {
-        // Windows — chmod is a no-op
-    }
-    try {
-        renameSync(tmp, path);
-    }
-    catch (err) {
-        // Rename failed — clean up the tmp file so we don't leave garbage.
-        // The original `path` (if any) is untouched; caller will see the
-        // write as failed and can retry.
-        try {
-            unlinkSync(tmp);
-        }
-        catch { /* best effort */ }
-        throw err;
-    }
-}
-// Resolve paths lazily so tests can mock `homedir()` between imports and
-// assertions. Using constants here would cache the real home dir at
-// module-load time and ignore the mock.
-function nookplotDir() { return join(homedir(), ".nookplot"); }
-function credentialsPath() { return join(nookplotDir(), "credentials.json"); }
-/** Path to a specific profile's metadata file. */
-export function profilePath(profileName) {
-    return join(nookplotDir(), "profiles", profileName, "profile.json");
-}
-/** Path to the root profiles dir (where all profiles live). */
-export function profilesDir() {
-    return join(nookplotDir(), "profiles");
-}
-/** Path to the sticky-default pointer file (set by `nookplot profile use`). */
-function activeProfilePath() {
-    return join(nookplotDir(), "active-profile");
+function resolveCredentialsPath() {
+    const explicit = process.env.NOOKPLOT_CREDENTIALS_PATH;
+    if (explicit && existsSync(explicit))
+        return explicit;
+    const profile = process.env.NOOKPLOT_PROFILE;
+    if (profile) {
+        const scoped = join(AGENTS_DIR, profile, "credentials.json");
+        if (existsSync(scoped))
+            return scoped;
+    }
+    return CREDENTIALS_PATH;
 }
 /**
- * Read `~/.nookplot/active-profile` and return the profile name it points at,
- * or undefined if unset / unreadable / empty. Used as the lowest-priority
- * fallback in `loadCredentials` so a sticky default set by the CLI applies
- * to MCP sessions spawned outside Hermes.
- *
- * Never throws — filesystem errors are silenced, which preserves the
- * fail-open pattern used elsewhere in this module.
+ * Load credentials from disk. Honors NOOKPLOT_PROFILE for child-agent
+ * scoping (see resolveCredentialsPath). Returns null if the file doesn't
+ * exist.
  */
-function readStickyProfile() {
-    try {
-        const path = activeProfilePath();
-        if (!existsSync(path))
-            return undefined;
-        const content = readFileSync(path, "utf-8").trim();
-        return content.length > 0 ? content : undefined;
-    }
-    catch {
-        return undefined;
-    }
-}
-/**
- * Load credentials — profile-aware.
- *
- * Resolution order (first match wins):
- *   1. `NOOKPLOT_PROFILE` env var → `~/.nookplot/profiles/<name>/profile.json`
- *      merged with default `credentials.json`. The profile only has
- *      `scopedAgentAddress`; creds come from the shared file.
- *   2. Default `~/.nookplot/credentials.json` (legacy single-agent path)
- *
- * Returns null if no creds file exists at all. Invalid profile name or
- * missing profile.json falls back to the default creds (not an error —
- * lets users run unscoped commands even when a profile env var was
- * left over from another shell).
- */
-export function loadCredentials(opts) {
-    // Resolution order (first non-empty wins):
-    //   1. Explicit `opts.profile` — set by write-profile / apply-config callers
-    //   2. `NOOKPLOT_PROFILE` env var — baked into Hermes config.yaml by the
-    //      installer, or exported by the CLI's preAction hook when --profile
-    //      was passed
-    //   3. Sticky default from `~/.nookplot/active-profile` — written by
-    //      `nookplot profile use <name>` and honored here so a user who sets
-    //      their default gets it everywhere, not just in the CLI `profile`
-    //      subcommand. Without this fallback the sticky default would be a
-    //      lie for MCP sessions spawned outside Hermes.
-    //   4. undefined — creator-direct (no scope merge)
-    const profileName = opts?.profile
-        ?? process.env.NOOKPLOT_PROFILE
-        ?? readStickyProfile();
-    // Always load base creds (API key, private key) from the default path.
-    // Per-profile scope is merged on top.
-    const baseCreds = loadCredentialsFromFile(credentialsPath());
-    if (!baseCreds)
-        return null;
-    if (!profileName)
-        return baseCreds;
-    // Try to read the profile's scope file. If it doesn't exist, fall back
-    // to base creds without scoping — users who export NOOKPLOT_PROFILE in
-    // their shell shouldn't get errors for other commands.
-    const profile = loadProfile(profileName);
-    if (!profile)
-        return baseCreds;
-    return {
-        ...baseCreds,
-        scopedAgentAddress: profile.scopedAgentAddress,
-        profileName,
-    };
-}
-/** Internal: load + validate a credentials.json at a given path. */
-function loadCredentialsFromFile(path) {
-    if (!existsSync(path))
+export function loadCredentials() {
+    const path = resolveCredentialsPath();
+    if (!existsSync(path)) {
         return null;
-    // ── File-mode safety check ──────────────────────────────────
-    // credentials.json contains the user's API key + private key — both
-    // wallet-equivalent secrets. If the file was created world-readable by
-    // accident (manual cp without preserving perms, weird umask, etc.) any
-    // other user on the same machine could read these. We don't refuse the
-    // load (would brick valid users on Windows where mode bits are fake)
-    // but we warn loudly so the user actually fixes it.
-    //
-    // Skip the check on Windows entirely — its st_mode bits don't follow
-    // POSIX semantics and the warning would be noise.
-    if (process.platform !== "win32") {
-        try {
-            const stat = statSync(path);
-            // mode & 0o077 = "anything outside owner can read/write/execute"
-            if ((stat.mode & 0o077) !== 0) {
-                const modeStr = (stat.mode & 0o777).toString(8).padStart(3, "0");
-                console.error(`[nookplot-mcp] WARNING: ${path} has unsafe permissions (mode ${modeStr}). ` +
-                    `Other users on this machine may be able to read your API key + wallet private key. ` +
-                    `Fix with: chmod 600 "${path}"`);
-            }
-        }
-        catch {
-            // If we can't stat, just proceed — readFileSync below will produce
-            // a more useful error for permission-denied cases.
-        }
     }
     try {
         const raw = readFileSync(path, "utf-8");
         const creds = JSON.parse(raw);
         // Validate required fields
         if (!creds.apiKey || !creds.privateKey || !creds.address || !creds.gatewayUrl) {
-            console.error(`[nookplot-mcp] Invalid credentials at ${path} — missing required fields`);
+            console.error("[nookplot-mcp] Invalid credentials file — missing required fields");
             return null;
         }
+        // When loaded via a profile path, surface the profile name so the
+        // server can log it ("Connected as <addr> · profile: <name>") and so
+        // tools can read ctx.scopedAgentAddress without the env var.
+        const profileName = process.env.NOOKPLOT_PROFILE;
+        if (profileName && path !== CREDENTIALS_PATH) {
+            creds.profileName = profileName;
+            // The address from the profile creds IS the scoped address — set
+            // it explicitly so downstream tools don't need to guess.
+            creds.scopedAgentAddress = creds.address;
+        }
         return creds;
     }
     catch (err) {
@@ -197,164 +73,21 @@ function loadCredentialsFromFile(path) {
         return null;
     }
 }
-/**
- * Load a profile's metadata file (`profile.json`). Returns null if the
- * profile doesn't exist or the file is malformed. Profile names must
- * match the Hermes-compatible rule — callers should validate beforehand.
- */
-export function loadProfile(profileName) {
-    const path = profilePath(profileName);
-    if (!existsSync(path))
-        return null;
-    try {
-        const raw = readFileSync(path, "utf-8");
-        const parsed = JSON.parse(raw);
-        if (typeof parsed.scopedAgentAddress !== "string" || parsed.scopedAgentAddress.length === 0) {
-            console.error(`[nookplot-mcp] Invalid profile '${profileName}' — missing scopedAgentAddress`);
-            return null;
-        }
-        return parsed;
-    }
-    catch (err) {
-        console.error(`[nookplot-mcp] Failed to read profile '${profileName}':`, err instanceof Error ? err.message : err);
-        return null;
-    }
-}
-/**
- * Save (or overwrite) a profile's metadata file. Creates the profile
- * directory if needed with 0o700 permissions (chmod-sensitive systems
- * only — Windows no-ops).
- *
- * Callers:
- *   - Installer bash writes this after apply-config
- *   - CLI `nookplot profile create` writes this
- *   - SDK helpers for programmatic profile setup
- */
-export function saveProfile(profileName, profile) {
-    const dir = join(profilesDir(), profileName);
-    if (!existsSync(dir)) {
-        mkdirSync(dir, { recursive: true, mode: 0o700 });
-    }
-    const path = profilePath(profileName);
-    const payload = {
-        ...profile,
-        createdAt: profile.createdAt ?? new Date().toISOString(),
-    };
-    // Atomic: tmp+rename so a crash can't leave profile.json truncated.
-    // A corrupt profile.json would orphan the forged agent's wrapper alias
-    // (user types `<slug> chat` and gets creator-direct scope instead of
-    // the intended agent). Not data loss per se — but silently wrong.
-    writeFileAtomic(path, JSON.stringify(payload, null, 2) + "\n", { mode: 0o600 });
-}
-/**
- * Safer wrapper around `saveProfile` that detects slug collisions before
- * overwriting. Use this instead of calling `saveProfile` directly from
- * any code path that accepts externally-provided profile names (the
- * installer bash, `write-profile` CLI, SDK consumers, etc.).
- *
- * Why: two forged agents whose display names slugify to the same string
- * (e.g. "Research Scout" and "Research-Scout" both → "research-scout")
- * would otherwise silently overwrite each other's profile.json, pointing
- * the wrapper alias `<slug> chat` at whichever was installed most
- * recently. The user has no signal the first install was orphaned.
- *
- * Passing `force: true` makes the write unconditional — reserve this for
- * cases where the caller has explicitly confirmed intent (e.g. the user
- * typed `write-profile --force`).
- *
- * Idempotent re-installs for the SAME forged agent address always succeed
- * (kind: "updated"). CreatedAt is preserved across same-address rewrites
- * so the audit timeline stays intact.
- */
-export function safeSaveProfile(profileName, profile, opts = {}) {
-    const newAddr = profile.scopedAgentAddress.toLowerCase();
-    const existing = loadProfile(profileName);
-    if (existing) {
-        const existingAddr = existing.scopedAgentAddress.toLowerCase();
-        if (existingAddr === newAddr) {
-            // Same agent — idempotent rewrite. Preserve original createdAt so
-            // re-running the installer doesn't reset the profile's audit clock.
-            saveProfile(profileName, {
-                ...profile,
-                scopedAgentAddress: newAddr,
-                createdAt: profile.createdAt ?? existing.createdAt,
-            });
-            return { kind: "updated", profileName, previousCreatedAt: existing.createdAt };
-        }
-        if (!opts.force) {
-            return {
-                kind: "collision",
-                profileName,
-                existingAddress: existingAddr,
-                attemptedAddress: newAddr,
-            };
-        }
-        // Forced overwrite: user explicitly opted in. Don't preserve the
-        // previous createdAt — this is a genuinely new mapping.
-    }
-    saveProfile(profileName, { ...profile, scopedAgentAddress: newAddr });
-    return { kind: "created", profileName };
-}
-/**
- * List every profile that has a valid profile.json. Used by
- * `nookplot profile list` + any UI that shows the user's forged-agent
- * roster. Returns profile names sorted alphabetically for deterministic
- * output.
- */
-export function listProfiles() {
-    if (!existsSync(profilesDir()))
-        return [];
-    const out = [];
-    try {
-        const entries = readdirSync(profilesDir());
-        for (const name of entries.sort()) {
-            const full = join(profilesDir(), name);
-            try {
-                if (!statSync(full).isDirectory())
-                    continue;
-            }
-            catch {
-                continue;
-            }
-            const profile = loadProfile(name);
-            if (profile)
-                out.push({ name, profile });
-        }
-    }
-    catch {
-        // Permissions or missing dir — return empty, don't crash.
-    }
-    return out;
-}
 /**
  * Save credentials to ~/.nookplot/credentials.json with restrictive permissions.
  */
 export function saveCredentials(creds) {
     // Ensure directory exists
-    if (!existsSync(nookplotDir())) {
-        mkdirSync(nookplotDir(), { recursive: true, mode: 0o700 });
+    if (!existsSync(NOOKPLOT_DIR)) {
+        mkdirSync(NOOKPLOT_DIR, { recursive: true, mode: 0o700 });
+    }
+    const content = JSON.stringify(creds, null, 2) + "\n";
+    writeFileSync(CREDENTIALS_PATH, content, { encoding: "utf-8", mode: 0o600 });
+    // Ensure restrictive permissions
+    try {
+        chmodSync(CREDENTIALS_PATH, 0o600);
     }
-    // Strip profile-scope fields before persisting. If a caller ever passed
-    // in creds that were loaded through a profile (e.g. accidentally round-
-    // tripped via loadCredentials({profile})), we'd otherwise pollute
-    // credentials.json with `scopedAgentAddress` + `profileName` — fields
-    // that are per-session metadata, not identity. This strip keeps the
-    // file's shape stable: apiKey + privateKey + address + gatewayUrl +
-    // optional displayName, nothing else.
-    const stripped = {
-        apiKey: creds.apiKey,
-        privateKey: creds.privateKey,
-        address: creds.address,
-        gatewayUrl: creds.gatewayUrl,
-        ...(creds.displayName ? { displayName: creds.displayName } : {}),
-    };
-    const content = JSON.stringify(stripped, null, 2) + "\n";
-    // Atomic: tmp+rename so a crash during rotate-key or first-time
-    // registration can't leave credentials.json truncated. A truncated
-    // credentials file would force the user to re-register from scratch
-    // — a catastrophic UX event. With tmp+rename the worst case on crash
-    // is "the old file is unchanged" which is always recoverable.
-    writeFileAtomic(credentialsPath(), content, { mode: 0o600 });
+    catch { /* Windows doesn't support chmod */ }
 }
 /**
  * Get the gateway URL from env, credentials, or default.

package/dist/auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACvI,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAElC;;;;;;;;;;;;;;;;;;;GAmBG;AACH,SAAS,eAAe,CACtB,IAAY,EACZ,OAAe,EACf,OAA0B,EAAE;IAE5B,MAAM,GAAG,GAAG,GAAG,IAAI,MAAM,CAAC;IAC1B,aAAa,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC;IAC7E,IAAI,CAAC;QACH,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;YAAE,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,6BAA6B;IAC/B,CAAC;IACD,IAAI,CAAC;QACH,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACxB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,mEAAmE;QACnE,iEAAiE;QACjE,iCAAiC;QACjC,IAAI,CAAC;YAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;QACpD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAgCD,yEAAyE;AACzE,oEAAoE;AACpE,wCAAwC;AACxC,SAAS,WAAW,KAAa,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC;AACvE,SAAS,eAAe,KAAa,OAAO,IAAI,CAAC,WAAW,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC;AAEtF,kDAAkD;AAClD,MAAM,UAAU,WAAW,CAAC,WAAmB;IAC7C,OAAO,IAAI,CAAC,WAAW,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC;AACtE,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,WAAW;IACzB,OAAO,IAAI,CAAC,WAAW,EAAE,EAAE,UAAU,CAAC,CAAC;AACzC,CAAC;AAED,+EAA+E;AAC/E,SAAS,iBAAiB;IACxB,OAAO,IAAI,CAAC,WAAW,EAAE,EAAE,gBAAgB,CAAC,CAAC;AAC/C,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,iBAAiB;IACxB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,iBAAiB,EAAE,CAAC;QACjC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,SAAS,CAAC;QACxC,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QACnD,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,eAAe,CAAC,IAA2B;IACzD,2CAA2C;IAC3C,6EAA6E;IAC7E,yEAAyE;IACzE,yEAAyE;IACzE,kBAAkB;IAClB,qEAAqE;IACrE,yEAAyE;IACzE,uEAAuE;IACvE,uEAAuE;IACvE,oDAAoD;IACpD,mDAAmD;IACnD,MAAM,WAAW,GACf,IAAI,EAAE,OAAO;WACV,OAAO,CAAC,GAAG,CAAC,gBAAgB;WAC5B,iBAAiB,EAAE,CAAC;IAEzB,uEAAuE;IACvE,sCAAsC;IACtC,MAAM,SAAS,GAAG,uBAAuB,CAAC,eAAe,EAAE,CAAC,CAAC;IAC7D,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAE5B,IAAI,CAAC,WAAW;QAAE,OAAO,SAAS,CAAC;IAEnC,uEAAuE;IACvE,uEAAuE;IACvE,uDAAuD;IACvD,MAAM,OAAO,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC;IACzC,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAE/B,OAAO;QACL,GAAG,SAAS;QACZ,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;QAC9C,WAAW;KACZ,CAAC;AACJ,CAAC;AAED,oEAAoE;AACpE,SAAS,uBAAuB,CAAC,IAAY;IAC3C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAEnC,+DAA+D;IAC/D,oEAAoE;IACpE,uEAAuE;IACvE,uEAAuE;IACvE,uEAAuE;IACvE,qEAAqE;IACrE,oDAAoD;IACpD,EAAE;IACF,qEAAqE;IACrE,kDAAkD;IAClD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC5B,iEAAiE;YACjE,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC9B,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;gBACjE,OAAO,CAAC,KAAK,CACX,2BAA2B,IAAI,iCAAiC,OAAO,KAAK;oBAC5E,qFAAqF;oBACrF,wBAAwB,IAAI,GAAG,CAChC,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,mEAAmE;YACnE,mDAAmD;QACrD,CAAC;IACH,CAAC;IAED,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACxC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAwB,CAAC;QAErD,2BAA2B;QAC3B,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;YAC9E,OAAO,CAAC,KAAK,CAAC,yCAAyC,IAAI,4BAA4B,CAAC,CAAC;YACzF,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,4CAA4C,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACtG,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,WAAmB;IAC7C,MAAM,IAAI,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC;IACtC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAEnC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAoB,CAAC;QAClD,IAAI,OAAO,MAAM,CAAC,kBAAkB,KAAK,QAAQ,IAAI,MAAM,CAAC,kBAAkB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5F,OAAO,CAAC,KAAK,CAAC,mCAAmC,WAAW,gCAAgC,CAAC,CAAC;YAC9F,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,0CAA0C,WAAW,IAAI,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACnH,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,WAAW,CAAC,WAAmB,EAAE,OAAwB;IACvE,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,EAAE,EAAE,WAAW,CAAC,CAAC;IAC7C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACnD,CAAC;IACD,MAAM,IAAI,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG;QACd,GAAG,OAAO;QACV,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACzD,CAAC;IACF,oEAAoE;IACpE,uEAAuE;IACvE,qEAAqE;IACrE,kEAAkE;IAClE,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AAClF,CAAC;AAiBD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,eAAe,CAC7B,WAAmB,EACnB,OAAwB,EACxB,OAA4B,EAAE;IAE9B,MAAM,OAAO,GAAG,OAAO,CAAC,kBAAkB,CAAC,WAAW,EAAE,CAAC;IACzD,MAAM,QAAQ,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC;IAE1C,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,YAAY,GAAG,QAAQ,CAAC,kBAAkB,CAAC,WAAW,EAAE,CAAC;QAC/D,IAAI,YAAY,KAAK,OAAO,EAAE,CAAC;YAC7B,kEAAkE;YAClE,oEAAoE;YACpE,WAAW,CAAC,WAAW,EAAE;gBACvB,GAAG,OAAO;gBACV,kBAAkB,EAAE,OAAO;gBAC3B,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,QAAQ,CAAC,SAAS;aACnD,CAAC,CAAC;YACH,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,iBAAiB,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC;QACjF,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAChB,OAAO;gBACL,IAAI,EAAE,WAAW;gBACjB,WAAW;gBACX,eAAe,EAAE,YAAY;gBAC7B,gBAAgB,EAAE,OAAO;aAC1B,CAAC;QACJ,CAAC;QACD,iEAAiE;QACjE,wDAAwD;IAC1D,CAAC;IAED,WAAW,CAAC,WAAW,EAAE,EAAE,GAAG,OAAO,EAAE,kBAAkB,EAAE,OAAO,EAAE,CAAC,CAAC;IACtE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;AAC1C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,YAAY;IAC1B,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC;QAAE,OAAO,EAAE,CAAC;IAC1C,MAAM,GAAG,GAAsD,EAAE,CAAC;IAClE,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,WAAW,CAAC,WAAW,EAAE,CAAC,CAAC;QAC3C,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;YAClC,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,EAAE,IAAI,CAAC,CAAC;YACvC,IAAI,CAAC;gBACH,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE;oBAAE,SAAS;YAC9C,CAAC;YAAC,MAAM,CAAC;gBAAC,SAAS;YAAC,CAAC;YACrB,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;YAClC,IAAI,OAAO;gBAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,0DAA0D;IAC5D,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,KAA0B;IACxD,0BAA0B;IAC1B,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;QAC/B,SAAS,CAAC,WAAW,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED,wEAAwE;IACxE,wEAAwE;IACxE,kEAAkE;IAClE,sEAAsE;IACtE,oEAAoE;IACpE,oEAAoE;IACpE,sCAAsC;IACtC,MAAM,QAAQ,GAAwB;QACpC,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACjE,CAAC;IACF,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;IAEzD,gEAAgE;IAChE,mEAAmE;IACnE,oEAAoE;IACpE,qEAAqE;IACrE,8DAA8D;IAC9D,eAAe,CAAC,eAAe,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AAC/D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,KAAkC;IAC9D,OAAO,OAAO,CAAC,GAAG,CAAC,oBAAoB;WAClC,KAAK,EAAE,UAAU;WACjB,8BAA8B,CAAC;AACtC,CAAC"}
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACxF,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAqBlC,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,CAAC;AAClD,MAAM,gBAAgB,GAAG,IAAI,CAAC,YAAY,EAAE,kBAAkB,CAAC,CAAC;AAChE,0EAA0E;AAC1E,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;AAEhD;;;;;;;;;;;;;GAaG;AACH,SAAS,sBAAsB;IAC7B,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC;IACvD,IAAI,QAAQ,IAAI,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAC;IAEtD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;IAC7C,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,kBAAkB,CAAC,CAAC;QAC7D,IAAI,UAAU,CAAC,MAAM,CAAC;YAAE,OAAO,MAAM,CAAC;IACxC,CAAC;IACD,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe;IAC7B,MAAM,IAAI,GAAG,sBAAsB,EAAE,CAAC;IACtC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACxC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAwB,CAAC;QAErD,2BAA2B;QAC3B,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;YAC9E,OAAO,CAAC,KAAK,CAAC,mEAAmE,CAAC,CAAC;YACnF,OAAO,IAAI,CAAC;QACd,CAAC;QAED,kEAAkE;QAClE,qEAAqE;QACrE,6DAA6D;QAC7D,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;QACjD,IAAI,WAAW,IAAI,IAAI,KAAK,gBAAgB,EAAE,CAAC;YAC7C,KAAK,CAAC,WAAW,GAAG,WAAW,CAAC;YAChC,iEAAiE;YACjE,yDAAyD;YACzD,KAAK,CAAC,kBAAkB,GAAG,KAAK,CAAC,OAAO,CAAC;QAC3C,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,4CAA4C,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACtG,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,KAA0B;IACxD,0BAA0B;IAC1B,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9B,SAAS,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;IACtD,aAAa,CAAC,gBAAgB,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAE7E,iCAAiC;IACjC,IAAI,CAAC;QAAC,SAAS,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,mCAAmC,CAAC,CAAC;AAC3F,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,KAAkC;IAC9D,OAAO,OAAO,CAAC,GAAG,CAAC,oBAAoB;WAClC,KAAK,EAAE,UAAU;WACjB,8BAA8B,CAAC;AACtC,CAAC"}

package/dist/gateway.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gateway.d.ts","sourceRoot":"","sources":["../src/gateway.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,WAAW,eAAe,CAAC,CAAC,GAAG,OAAO;IAC1C,EAAE,EAAE,IAAI,CAAC;IACT,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,CAAC,CAAC;CACT;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,eAAe,GAAG,YAAY,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,IAAI,YAAY,CAGhH;AAWD;;GAEG;AACH,wBAAsB,cAAc,CAAC,CAAC,GAAG,OAAO,EAC9C,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,OAAO,EACnD,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE;IACR,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,wDAAwD;IACxD,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GACA,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,GAAG,YAAY,CAAC,CA+F5C;AAED;;GAEG;AACH,wBAAsB,uBAAuB,CAAC,CAAC,GAAG,OAAO,EACvD,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,OAAO,EACnD,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE;IACR,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,wDAAwD;IACxD,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GACA,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,GAAG,YAAY,CAAC,CAmB5C"}
+{"version":3,"file":"gateway.d.ts","sourceRoot":"","sources":["../src/gateway.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,WAAW,eAAe,CAAC,CAAC,GAAG,OAAO;IAC1C,EAAE,EAAE,IAAI,CAAC;IACT,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,CAAC,CAAC;CACT;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,eAAe,GAAG,YAAY,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,IAAI,YAAY,CAGhH;AAWD;;GAEG;AACH,wBAAsB,cAAc,CAAC,CAAC,GAAG,OAAO,EAC9C,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,OAAO,EACnD,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE;IACR,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,wDAAwD;IACxD,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GACA,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,GAAG,YAAY,CAAC,CA2F5C;AAED;;GAEG;AACH,wBAAsB,uBAAuB,CAAC,CAAC,GAAG,OAAO,EACvD,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,OAAO,EACnD,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE;IACR,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,wDAAwD;IACxD,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GACA,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,GAAG,YAAY,CAAC,CAmB5C"}

package/dist/gateway.js

@@ -97,13 +97,9 @@ export async function gatewayRequest(gatewayUrl, method, path, options) {
     }
     if (!response.ok) {
         const errBody = data;
-        const baseMsg = errBody.message
+        const errorMsg = errBody.message
             ? (errBody.error ? `${errBody.error}: ${errBody.message}` : errBody.message)
             : (errBody.error ?? `Request failed (${response.status})`);
-        // Prepend machine-readable code so agents can branch on it programmatically
-        // (e.g. distinguish SAME_CREATOR_VERIFICATION from POSTER_VERIFICATION
-        // even when both surface as 403). Format: `[CODE] human message`.
-        const errorMsg = errBody.code ? `[${errBody.code}] ${baseMsg}` : baseMsg;
         return { ok: false, status: response.status, error: errorMsg };
     }
     return { ok: true, status: response.status, data: data };

package/dist/gateway.js.map

@@ -1 +1 @@
-{"version":3,"file":"gateway.js","sourceRoot":"","sources":["../src/gateway.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAeH,MAAM,UAAU,cAAc,CAAC,MAAyD;IACtF,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;AACpB,CAAC;AAED,iEAAiE;AACjE,MAAM,OAAO,GAAG;IACd,MAAM,EAAE,KAAK;IACb,UAAU,EAAE,CAAC;IACb,MAAM,EAAE,CAAC;IACT,SAAS,EAAE,GAAG;IACd,SAAS,EAAE,GAAG;CACf,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,UAAkB,EAClB,MAAmD,EACnD,IAAY,EACZ,OAMC;IAED,MAAM,GAAG,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;IAE3F,MAAM,OAAO,GAA2B;QACtC,cAAc,EAAE,kBAAkB;QAClC,mBAAmB,EAAE,OAAO,OAAO,EAAE,aAAa,IAAI,SAAS,EAAE;KAClE,CAAC;IAEF,IAAI,OAAO,EAAE,MAAM,EAAE,CAAC;QACpB,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,OAAO,CAAC,MAAM,EAAE,CAAC;IACxD,CAAC;IAED,yEAAyE;IACzE,IAAI,OAAO,EAAE,MAAM,EAAE,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;YAC5B,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,KAAK,WAAW,IAAI,MAAM,CAAC,QAAQ,KAAK,WAAW,CAAC;YACnF,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAC7C,OAAO,CAAC,IAAI,CACV,6DAA6D,MAAM,CAAC,QAAQ,GAAG;oBAC/E,2EAA2E,CAC5E,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,8CAA8C,CAAC,CAAC;IAC5D,CAAC;IAED,8FAA8F;IAC9F,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,SAAS,IAAI,MAAM,CAAC,CAAC;IAErF,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC1B,MAAM;YACN,OAAO;YACP,IAAI,EAAE,OAAO,EAAE,IAAI,KAAK,SAAS,IAAI,MAAM,KAAK,KAAK;gBACnD,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC;gBAC9B,CAAC,CAAC,SAAS;YACb,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,YAAY,CAAC,SAAS,CAAC,CAAC;QACxB,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,CAAC;YACT,KAAK,EAAE,2BAA2B,UAAU,WAAW,OAAO,EAAE;SACjE,CAAC;IACJ,CAAC;IAED,YAAY,CAAC,SAAS,CAAC,CAAC;IAExB,sBAAsB;IACtB,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QAC5D,IAAI,YAAgC,CAAC;QACrC,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,SAAS,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;YACtC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC7B,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,GAAG,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;QAED,IAAI,QAAgB,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAA0C,CAAC;YAC3E,QAAQ,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,IAAI,qBAAqB,CAAC;QACjE,CAAC;QAAC,MAAM,CAAC;YACP,QAAQ,GAAG,qBAAqB,CAAC;QACnC,CAAC;QAED,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;IACnE,CAAC;IAED,sBAAsB;IACtB,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,GAAG,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,OAAO,GAAG,IAA2D,CAAC;QAC5E,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO;YAC7B,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;YAC5E,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,IAAI,mBAAmB,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;QAC7D,4EAA4E;QAC5E,uEAAuE;QACvE,kEAAkE;QAClE,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;QACzE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IACjE,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,IAAS,EAAE,CAAC;AAChE,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,UAAkB,EAClB,MAAmD,EACnD,IAAY,EACZ,OAMC;IAED,IAAI,UAA6C,CAAC;IAElD,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,OAAO,CAAC,UAAU,EAAE,OAAO,EAAE,EAAE,CAAC;QAC/D,UAAU,GAAG,MAAM,cAAc,CAAI,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QAExE,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC7D,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,IAAI,OAAO,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;YACjC,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACrE,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;YAC3F,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,GAAG,MAAM,EAAE,MAAM,CAAC,CAAC;YACnD,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAED,OAAO,UAAW,CAAC;AACrB,CAAC"}
+{"version":3,"file":"gateway.js","sourceRoot":"","sources":["../src/gateway.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAeH,MAAM,UAAU,cAAc,CAAC,MAAyD;IACtF,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;AACpB,CAAC;AAED,iEAAiE;AACjE,MAAM,OAAO,GAAG;IACd,MAAM,EAAE,KAAK;IACb,UAAU,EAAE,CAAC;IACb,MAAM,EAAE,CAAC;IACT,SAAS,EAAE,GAAG;IACd,SAAS,EAAE,GAAG;CACf,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,UAAkB,EAClB,MAAmD,EACnD,IAAY,EACZ,OAMC;IAED,MAAM,GAAG,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;IAE3F,MAAM,OAAO,GAA2B;QACtC,cAAc,EAAE,kBAAkB;QAClC,mBAAmB,EAAE,OAAO,OAAO,EAAE,aAAa,IAAI,SAAS,EAAE;KAClE,CAAC;IAEF,IAAI,OAAO,EAAE,MAAM,EAAE,CAAC;QACpB,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,OAAO,CAAC,MAAM,EAAE,CAAC;IACxD,CAAC;IAED,yEAAyE;IACzE,IAAI,OAAO,EAAE,MAAM,EAAE,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;YAC5B,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,KAAK,WAAW,IAAI,MAAM,CAAC,QAAQ,KAAK,WAAW,CAAC;YACnF,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAC7C,OAAO,CAAC,IAAI,CACV,6DAA6D,MAAM,CAAC,QAAQ,GAAG;oBAC/E,2EAA2E,CAC5E,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,8CAA8C,CAAC,CAAC;IAC5D,CAAC;IAED,8FAA8F;IAC9F,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,SAAS,IAAI,MAAM,CAAC,CAAC;IAErF,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC1B,MAAM;YACN,OAAO;YACP,IAAI,EAAE,OAAO,EAAE,IAAI,KAAK,SAAS,IAAI,MAAM,KAAK,KAAK;gBACnD,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC;gBAC9B,CAAC,CAAC,SAAS;YACb,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,YAAY,CAAC,SAAS,CAAC,CAAC;QACxB,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,CAAC;YACT,KAAK,EAAE,2BAA2B,UAAU,WAAW,OAAO,EAAE;SACjE,CAAC;IACJ,CAAC;IAED,YAAY,CAAC,SAAS,CAAC,CAAC;IAExB,sBAAsB;IACtB,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QAC5D,IAAI,YAAgC,CAAC;QACrC,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,SAAS,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;YACtC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC7B,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,GAAG,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;QAED,IAAI,QAAgB,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAA0C,CAAC;YAC3E,QAAQ,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,IAAI,qBAAqB,CAAC;QACjE,CAAC;QAAC,MAAM,CAAC;YACP,QAAQ,GAAG,qBAAqB,CAAC;QACnC,CAAC;QAED,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;IACnE,CAAC;IAED,sBAAsB;IACtB,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,GAAG,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,OAAO,GAAG,IAA4C,CAAC;QAC7D,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO;YAC9B,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;YAC5E,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,IAAI,mBAAmB,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;QAC7D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IACjE,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,IAAS,EAAE,CAAC;AAChE,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,UAAkB,EAClB,MAAmD,EACnD,IAAY,EACZ,OAMC;IAED,IAAI,UAA6C,CAAC;IAElD,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,OAAO,CAAC,UAAU,EAAE,OAAO,EAAE,EAAE,CAAC;QAC/D,UAAU,GAAG,MAAM,cAAc,CAAI,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QAExE,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC7D,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,IAAI,OAAO,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;YACjC,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACrE,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;YAC3F,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,GAAG,MAAM,EAAE,MAAM,CAAC,CAAC;YACnD,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAED,OAAO,UAAW,CAAC;AACrB,CAAC"}

package/dist/index.d.ts

@@ -10,16 +10,5 @@
  *
  * @module index
  */
-/**
- * Compare two semver strings. Returns:
- *   -1 if `a < b`, 0 if equal, 1 if `a > b`.
- * Lightweight parser — handles `x.y.z` and `x.y.z-prerelease.n`. We treat
- * a missing pre-release as "higher" than one that has it (so `0.5.0` >
- * `0.5.0-beta.1`). Good enough for the single use-case here — comparing
- * our own `package.json` version against the npm `@latest` dist-tag.
- *
- * Exported for unit tests — production code uses it only inside
- * checkForUpdate().
- */
-export declare function compareSemver(a: string, b: string): number;
+export {};
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA;;;;;;;;;;GAUG;AA8BH;;;;;;;;;;GAUG;AACH,wBAAgB,aAAa,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAoB1D"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA;;;;;;;;;;GAUG"}